Privacy Policy for Solitaire Land

This Privacy Policy explains what information Solitaire Land (the website at solitaireland.com, the "Website") collects when you play, why, who else receives it, how long we keep it and what you can ask us to do with it. You can play every game without an account and without giving us your name or email address.

1. Information we collect

   • Your browser's game identity. The first time you play, our server creates a random identifier and key for your browser (a "device") and the game keeps them in your browser's local storage. They let us save your games, levels, daily challenges and trophies without an account. Clearing your browser's data removes them from your browser.
   • Technical information. When a playing session starts (about once a day) we record your browser's user agent, platform, vendor, screen size and language, the address of the page and the IP address of that session. From the IP address, a location database kept on our own server works out your country and city; the IP address is not sent to anyone for this. Your country is used for statistics and for the seasonal decorations that suit where you are.
   • Your games. For each finished game: the game, the deal number, the time, the number of moves, whether you won and the type of deal, with your device, country and city. For wins we also receive the list of moves you made (a replay), which we use to check that the win is real; the best replays of each deal are kept and can be watched by other players. A replay is shown with its player's name, photo and country only if that player chose to be shown on leaderboards; otherwise replays, best times and best moves are shown without any name.
   • Usage events and errors. The game sends us events about how it is used (for example a game started or finished, a setting changed, how fast the page loaded), linked to your device. We keep these individual events for 90 days and after that only daily totals. When the game hits a programming error, it sends us the error message, the page and your browser's user agent so we can fix it; these are grouped and deleted 30 days after the error was last seen.
   • Google sign-in (optional). If you choose to sign in with Google, Google sends us your Google account identifier, your name, the address of your profile picture and your email address (if Google has verified it). We store these with your country and city at the time of your first sign-in, link them to your browser's device and save your game settings and progress so they follow you to other browsers where you sign in. Your name and picture are shown to you in the game.
   • Email accounts (optional). You can create an account with your email address and a password. We store your email address, your password only in a protected form (a salted hash: we never store the password itself), the date you joined, your confirmation that you are 16 or older, the language of the page you used (for our emails) and your country worked out from your IP address. We email you codes to confirm your address, to log in without your password and to choose a new password; each code works for 15 minutes. Until you choose a name, the game makes one from your email address (for example "Ada L.") or, with Google, from your first name and initial, and shows it only to you. Your account, whether made with Google or with your email address, links the browsers where you log in, so your games, levels, daily challenges, trophies and settings follow you. A login lasts one year on each browser, or until you log out.
   • Leaked password check. When you choose a password, we check that it has not appeared in a known data leak, using the Have I Been Pwned service: only the first 5 characters of a hash of your password leave our server, never the password itself, and the comparison is done on our server.
   • Your public profile (optional). In your account you can choose the name other players see, upload a photo and change your country (once every 90 days; at first it is the country worked out from your IP address). We turn your photo into two small square copies and keep only those: they are new pictures made from its pixels, without any hidden information such as where or with what it was taken, and the photo you uploaded is not kept. If you signed in with Google you can also use your Google picture: we then download it once and make the same copies. Your name, photo and country are shown to other players (next to your replays today, and on leaderboards) only if you choose to be shown: after your first login we ask you once, nothing is shown unless you say yes, and you can change it at any time in your account.
   • Leaderboards. From your account's verified wins (checked with their replays) we work out your places on the leaderboards: for each game and for all games together, the number of wins of all time and for each day, week and month, and for each day's daily challenge your fastest time and its number of moves; the leaderboards show some of these. If you chose to be shown, anyone who opens a leaderboard on the Website, logged in or not, sees your place there with your name, photo and country; you can watch the daily challenge runs shown on a board. Each game also has a public leaderboard page on the Website, which search engines can find, with its top players of all time and of the daily challenge: it shows the same name, photo, country and wins or times as the leaderboards and nothing more. It is rebuilt at least once a day, so when you stop being shown, are removed or delete your account, you leave it within a day (a search engine may keep an older copy for a while). If you did not, you are left out and only you see your own place. Wins played without an account are not on leaderboards.
   • Achievements. From the games you win (once our server has checked them), your daily challenges and your levels we work out your achievements: counters such as your wins per game, best times, wins in a row and wins without undo or a hint (the list of moves we receive for a win also notes when you asked for a hint), and the achievements you earned with their dates. Only you see them, in the game. Played without an account they belong to your browser; when you log in they join your account.
   • Checks and reports. To keep names and photos suitable for everyone, we check a name against word lists on our server and then, like a photo, with an automatic moderation service when you save it (see "Who receives it"). A name or photo that may break our rules waits for our review: until then only you see it. Players can report a name or photo with the Report button; we store the report (the account or browser that sent it, its IP address, the name or photo at that moment, the reason and any words written) and receive it by email. After three reports from different players a name or photo is hidden until we review it. When we remove or reset a name or photo, or limit or close an account, we record what we did and why, and we tell you by email.
   • Contact and bug report forms. When you write to us through a form we store your name, email address, message, the page and the country and city worked out from your IP address, and forward the message to our email inbox so we can answer.
   • Server logs. Our web servers record each request (IP address, page, time, browser) for security and to fix problems. These logs are deleted after 14 days.
   • Google Analytics and Google AdSense. The Website uses Google Analytics to measure visits and Google AdSense to show advertising, which pays for the Website. Both use cookies and similar technologies and receive your IP address and information about your visit. In the European Economic Area, the United Kingdom and Switzerland they run only as far as you allow in the consent message shown on your first visit, which you can change at any time through the privacy and cookie settings link the consent message leaves on the page. You can learn how Google uses this information at policies.google.com/technologies/partner-sites.

2. Why we use it
   We use this information to run the game and save your progress (needed to provide the service you asked for), to check scores and keep them fair, to keep the Website secure and fix problems, and to understand how the Website is used so we can improve it (our legitimate interests). Advertising and analytics cookies in the European Economic Area, the United Kingdom and Switzerland are based on your consent. We do not sell your information and we do not use it to make decisions that have legal or similarly significant effects on you.

3. Who receives it
   We share information only with the service providers that help us run the Website: OVH, which hosts our servers in the European Union; Cloudflare, which delivers the Website's pages and protects it from attacks, and so handles your IP address and requests; Google, for Google Analytics, Google AdSense and Google sign-in, as described above, and for the email inbox where messages from our forms arrive; Postmark (ActiveCampaign, LLC), which delivers the emails we send you (codes) from its servers in the United States and keeps them for 45 days; Have I Been Pwned, which receives only the first 5 characters of a password hash, as described above; OpenAI, L.L.C. (United States), whose moderation service checks a name or a photo when you save it: it receives only that name, or the small square copy of that photo, with nothing that identifies you, and under its terms for this service it does not use them to train its models and keeps them only as long as the service needs. Some of these providers process information outside the European Union, in particular in the United States. They do so under the safeguards required by law, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. We may also disclose information when the law requires it, or to protect the Website and its players from fraud or abuse. We also publish statistics about the games played on the Website, and share them with researchers who ask for them, for example win rates by game and by country. These are totals of many players' games: they contain no information about any person, and a figure is only published when it comes from at least 20 different players.

4. How long we keep it
   Your device, your games, levels, daily challenges, trophies and, if you have an account, your account details and settings are kept for as long as the Website runs, unless you ask us to delete them. Your account, profile, name and photo are kept until you delete your account. Leaderboard places are kept while the Website runs or until you delete your account. Reports and our moderation decisions are kept for a year after they were handled. Emails we send you are kept by Postmark for 45 days. Usage events are kept for 90 days, error reports for 30 days after the error was last seen and server logs for 14 days. Messages from the forms are kept for as long as we need them to deal with your request. Backup copies of our database are replaced within about two months.

5. Your rights
   You can ask us for a copy of the information we hold about you, to correct it, to delete it, to receive it in a portable format, or to object to or restrict how we use it. To do so, write to us at the address below; for game data, tell us that you play on this Website so we can find your device (we may ask you to confirm it is yours). If you have an account you can do two things yourself in your account in the game: download your data (your account, login methods, profile, settings, the browsers linked to it and the games, daily challenges, levels, trophies, achievements and leaderboard places of your account, as a file) and delete your account. Deleting it removes your account, login methods, profile, name, photo, settings, the levels, daily challenges, trophies, achievements and leaderboard places of your account and the reports you made, and unlinks your browsers, which keep playing without an account. Your past games and their replays stay in our statistics and deal records without any link to you or your browser. You can also complain to a data protection authority, such as the one where you live.

6. Children
   The games are suitable for all ages and can be played without giving us any personal details. Accounts (with Google or with an email address), names, photos and the contact forms are meant for people aged 16 or over. If you believe a child under 16 has given us personal details, contact us and we will delete them.

7. Security
   We take reasonable steps to protect your information, such as encrypted connections and restricted access to our servers. No website or internet transmission is completely secure, and we cannot guarantee the security of your information.

8. Links to other websites
   This Policy does not apply to websites or services that we do not own or control, including those the Website links to.

9. Changes to this Policy
   We may update this Policy from time to time. We will post the new version here and change the date at the bottom of this page. If a change is significant, we will also tell you on the Website.

10. Contact
    If you have any questions or requests about this Policy or your information, contact us at [email protected].

This document was last updated on Oct 26, 2026